Block airplay via EAP
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi,
I have 7 EAP-110 and 1 EAP-225 which goes through unmanaged switched back to the router which is a TP link MR400 and an Oc200 controller.
The EAP-225 has three further 225's meshed to it
Every EAP is set to Guest mode, clients can only connect to SSID's set as guest mode and from testing I could not find a way where a client could ping or see another client on the network.
I have not currently setup a vlan for each EAP.
However it turns out airplay and potentially other Google home/alexa/roku devices are visible across the network and clients are able to attempt to stream to other clients devices.
I'm sure this is user error on my part because this can't be acceptable in any business but tp link support are telling me it's not possible to block this.
Can someone else shed some light on this please.
I think you may need a managed switch (ie SG2008 or better) to implement a working ACL, which I would do as a Switch ACL. You can try as an EAP ACL (which doesn't have the bidirectional option) but historically the Gateay and EAP ACLs have not always worked as expected.
Here I block all LANs from talking to one another, which logically should also prevent members of the same subnet (but I don't know if that is how the controller->switch is implemented).
